@maxsec: "Trying to find a good summary on the state of PUA in current (0.98) and how
best to turn on/off specific categories
The FAQ <url>
quite basic and the main PUA page on the main site dates back to 2007
so
wondering what current state of play is, and whether its safe to use now?
Martin Hepworth, CISSP
Oxford, UK
_______________________________________________
Help us build a comprehensive ClamAV guide:
<url>
<url>"
    @alvarnell: "<quote>
       detect-pua[=yes/no(*)]
              Detect Possibly Unwanted Applications.
       exclude-pua=CATEGORY
              Exclude  a specific PUA category. This option can be used multi-
              ple times. 
       include-pua=CATEGORY
              Only  include  a  specific PUA category. This option can be used
              multiple times. 
I don't know what you mean by "safe to use now". I've used it for years and never knew it was not safe.
-Al-
Al Varnell
Mountain View, CA
_______________________________________________
Help us build a comprehensive ClamAV guide:
<url>
<url>"
    @maxsec: "Thanks
was looking at the PUA page on the main www site and it's still got the
2007 advice of "here be monsters tread carefully" ;-)
Martin Hepworth, CISSP
Oxford, UK
<quote>
_______________________________________________
Help us build a comprehensive ClamAV guide:
<url>
<url>"
    @Paulcv: "<quote>
I use them but Alain Zidouemba from Sourcefire replied to a question in March 2013 about a 
PUA type that didn't fall into one of the categories saying:
I haven't heard anything since about that issue or any 'renaming' so perhaps there are 
changes still to come.
paul
_______________________________________________
Help us build a comprehensive ClamAV guide:
<url>
<url>"
    @jesler: "<quote>
Looking for this page, and I can=92t find it?  Where do you see this?
Joel Esler
Senior Research Engineer, VRT
OpenSource Community Manager
Sourcefire
_______________________________________________
Help us build a comprehensive ClamAV guide:
<url>
<url>"
    @jesler: "<quote>
arch 2013 about a =
aps there are =
Thanks Paul,
I=92ll see if we can=92t get a blog post up describing our naming conventio=
ns, etc.
Joel Esler
Senior Research Engineer, VRT
OpenSource Community Manager
Sourcefire
_______________________________________________
Help us build a comprehensive ClamAV guide:
<url>
<url>"
    @maxsec: "Joel
this one when you search on the g-search for clamav pua..
<url>
applications/
Martin
 =
Martin Hepworth, CISSP
Oxford, UK
<quote>
_______________________________________________
Help us build a comprehensive ClamAV guide:
<url>
<url>"
    @jesler: "Ah, that was a blog post from 2007 from our blog (<url>
I see, okay.  Yes, the functionality is quite useful, and the most current =
docs we have on the subject are in the Github repository.  =
As a reminder
Anyone can contribute to these docs by doing a pull request against them an=
d we=92ll take a look and approve!
Joel Esler
Senior Research Engineer, VRT
OpenSource Community Manager
Sourcefire
<quote>
d-applications/
_______________________________________________
Help us build a comprehensive ClamAV guide:
<url>
<url>"
    @maxsec: "Joel
thanks, is this list still correct..
<url>
seems to be missing a few that are mentioned in other posts (and indeed the
clamd.conf example file).
Also the clamd.conf example file points to
<url>
which 404's
 =
Martin
 =
Martin Hepworth, CISSP
Oxford, UK
<quote>
d-applications/
he
_______________________________________________
Help us build a comprehensive ClamAV guide:
<url>
<url>"
    @steveb_clamav: "<quote>
Hi Martin,
I think it's slightly outdated... just looking at the daily ones....
PUA.Crypt.ScriptCryptor
PUA.CVE_2007_0214
PUA.CVE_2007_0325
PUA.CVE_2007_1498
PUA.CVE_2011_3397
PUA.CVE_2012_1419
PUA.CVE_2012_1421
PUA.CVE_2012_1423
PUA.CVE_2012_1430
PUA.CVE_2012_1431
PUA.EmbeddedJSinOCXinWordDoc
PUA.Everyzone
PUA.Exploit.HeapSpray
PUA.EXPLOIT_CVE_2006_4701
PUA.Game
PUA.HTML
PUA.IRC
PUA.JS
PUA.Keylogger-1
PUA.Keylogger-2
PUA.Keylogger-3
PUA.Keylogger-4
PUA.Liveplayer
PUA.Liveplayer-1
PUA.Liveplayer-2
PUA.Mydoomer
PUA.NetTool
PUA.OLE.EmbeddedPDF
PUA.Packed
PUA.PDF
PUA.PwTool
PUA.RAT
PUA.Reboot
PUA.RelevantKnowledge
PUA.RelevantKnowledge-1
PUA.RFT.EmbeddedOLE
PUA.Script
PUA.Server.PsyBNC
PUA.Spy
PUA.Tool
PUA.Trojan.PHP
PUA.USBCillin
PUA.VmAvoid
PUA.Win32.Packer.22bAnti
Cheers,
Steve
Sanesecurity
_______________________________________________
Help us build a comprehensive ClamAV guide:
<url>
<url>"
    @jesler: "Martin,
I=92ll ask someone to take a sabrina31@example.org.
<quote>
he
nt
ed-applications/
he
_______________________________________________
Help us build a comprehensive ClamAV guide:
<url>
<url>"
    @maxsec: "Joel
If there's anything I can do to help out here let me know..
 =
Martin Hepworth, CISSP
Oxford, UK
<quote>
em
d-applications/
_______________________________________________
Help us build a comprehensive ClamAV guide:
<url>
<url>"
{'source': 'USENET', 'other_information': '{"reply_count": 11, "forum_name": "mailing.unix.clam-users.20140922.mbox"}', 'file': 'data/output/usenet-mailing.unix.parquet'}